CVE-2021-43673

dzzoffice 2.02.1SCUTF8 is affected by a Cross Site Scripting XSS vulnerability in explorerfile.php. The output of the exit function is printed for the user via exitjsonencode$return...

Cross site scripting

dzzoffice 2.02.1SCUTF8 is affected by a Cross Site Scripting XSS vulnerability in explorerfile.php. The output of the exit function is printed for the user via exitjsonencode$return...

CVE-2021-43673

CVE-2021-43673 affects dzzoffice 2.02.1_SC_UTF8. A Cross Site Scripting (XSS) vulnerability exists in explorerfile.php where the exit(json_encode($return)) output is sent to the user. CVSS details in the sources show a MEDIUM severity (CVSS v2: 4.3; CVSS v3.1: 6.1). No remediation or patch inform...